Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/zQvAt0PFFdSOVmK9yVXW4bkfcBQ.roa
File: zQvAt0PFFdSOVmK9yVXW4bkfcBQ.roa (raw, json)
Hash identifier: 0A1InBNmp1sdJq1WGNNUQaDsTDhvE/a5oqcb8LEdGkQ=
Subject key identifier: CD:0B:C0:B7:43:C5:15:D4:8E:56:62:BD:C9:55:D6:E1:B9:1F:70:14
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 023706A7
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/zQvAt0PFFdSOVmK9yVXW4bkfcBQ.roa
Signing time: Sat 01 Jan 2022 12:04:30 +0000
ROA not before: Sat 01 Jan 2022 12:04:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 149.3.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37160615 (0x23706a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Jan 1 12:04:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd0bc0b743c515d48e5662bdc955d6e1b91f7014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:98:04:e3:13:91:83:0f:53:56:c7:02:17:96:
23:12:6f:c1:31:53:23:b7:06:d7:2c:1c:99:92:8c:
42:65:fc:16:8e:dd:6b:15:c5:fd:d1:21:e8:fe:0a:
82:80:ae:37:4f:b0:2b:17:ba:0c:d7:66:a2:da:15:
ec:6c:3d:09:c0:8b:b9:2d:80:30:05:ab:b6:3f:ed:
14:8d:c0:80:41:b6:a7:45:87:4b:5c:c7:2a:a9:48:
31:05:db:c3:43:7c:a0:c8:8a:81:c2:01:45:d8:fa:
aa:08:e2:74:50:18:f5:8d:bb:ea:07:d1:78:d1:31:
ff:db:02:52:85:1a:0c:81:1b:fb:f0:e7:f4:de:9c:
11:4b:13:52:e1:63:c2:0a:d9:b5:1d:3d:92:0b:1c:
88:0a:9c:a7:44:58:ff:84:51:75:2a:46:e3:a6:21:
af:97:2c:98:ad:2a:bc:26:36:01:9f:70:87:59:6e:
16:ba:8d:ec:7b:c1:53:aa:3e:dc:7e:cd:11:81:77:
76:ff:a3:17:6d:72:7b:b4:cb:a2:1a:04:52:0d:4a:
a0:7d:a6:85:8d:59:bc:df:3f:a3:16:f0:a4:4e:80:
20:e5:6c:76:2c:9f:9e:bc:56:f1:26:31:c3:db:f9:
88:3e:65:37:40:2c:61:75:87:7e:ed:9d:39:e1:f4:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0B:C0:B7:43:C5:15:D4:8E:56:62:BD:C9:55:D6:E1:B9:1F:70:14
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/zQvAt0PFFdSOVmK9yVXW4bkfcBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.3.171.0/24
Signature Algorithm: sha256WithRSAEncryption
22:fd:e8:f6:f9:ae:33:5d:b6:6c:b9:c5:69:3a:b5:ab:04:5a:
d7:fc:bb:a6:0e:87:8c:47:ce:21:2e:2f:a4:29:b0:4e:ef:8c:
b7:bd:06:ee:7d:e6:2f:5b:63:15:2e:2c:74:09:35:b0:ef:fe:
9a:5f:cc:82:45:db:17:85:33:1a:49:2b:ad:4c:64:6c:9b:d5:
22:70:31:f7:31:4b:9e:12:d1:e2:6b:1a:71:e1:a8:03:f3:d8:
96:8c:18:ac:bb:7b:69:eb:ea:6b:0b:89:e3:a8:22:58:3b:c7:
c9:aa:d5:04:8a:b2:bf:6a:dc:66:ae:92:67:9d:81:0b:d7:d0:
a9:1e:36:10:17:6d:8a:86:36:b7:10:12:8b:a3:61:d3:df:1e:
48:0a:83:65:62:ea:ec:47:f5:30:af:1b:a6:7d:29:47:ba:8c:
42:4c:ab:53:fa:47:ba:1a:7d:a8:2d:35:91:35:c9:cd:08:a8:
00:a3:01:27:ac:4f:ba:28:a1:f2:66:50:2b:35:be:9f:3b:8d:
05:dd:7c:f4:ba:8b:33:f4:98:8c:b1:0d:e8:f8:3e:bb:0e:f4:
21:28:3c:f9:14:0e:d4:be:0a:9b:ed:8a:41:64:5d:1e:c7:29:
bd:89:f6:3c:ae:23:b7:e6:b5:bd:cd:8d:bb:42:6d:87:20:05:
33:75:b2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:46 2024 by rpki-client on console-fra.rpki-client.org